To disable CSFP at the top of a controller:

skip_before_filter :verify_authenticity_token

http://ryandaigle.com/articles/2007/9/24/what-s-new-in-edge-rails-better-cross-site-request-forging-prevention

Layout Controls

layout :some_layout, :only => [:new, :edit]
layout :some_other_layout, :except [:list, :show]